Route Origin Authorization
$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS32519.roa
File: AS32519.roa (raw, json)
Hash identifier: JmUO0qrjnAqmINqM96/raZ8k4jU2p/2F1HoBgw6TZsI=
Subject key identifier: 21:4B:42:C7:A4:9E:4B:85:CF:D9:6A:74:61:BC:33:65:DE:C2:14:9E
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 72D819C95C94985E164C2216BFA58F51DFB176B4
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS32519.roa
Signing time: Wed 23 Sep 2026 21:48:06 +0000
ROA not before: Wed 23 Sep 2026 21:43:06 +0000
ROA not after: Wed 22 Sep 2027 21:48:06 +0000
asID: 32519
IP address blocks: 45.11.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:d8:19:c9:5c:94:98:5e:16:4c:22:16:bf:a5:8f:51:df:b1:76:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Sep 23 21:43:06 2026 GMT
Not After : Sep 22 21:48:06 2027 GMT
Subject: CN=214B42C7A49E4B85CFD96A7461BC3365DEC2149E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:4b:ef:c5:96:f1:5c:c9:96:b8:c5:52:11:
f5:98:f7:b3:e2:ab:b6:cf:70:91:43:31:c2:bf:e2:
31:2c:51:ec:b0:e8:b7:c9:27:e0:bd:b1:60:70:ef:
71:15:a6:de:2e:68:23:e0:b5:c7:80:2f:dd:ec:52:
67:7a:c8:5f:e1:70:a3:09:bc:ed:36:96:df:f0:5a:
4c:3e:ef:43:52:31:a9:b7:c8:81:ea:a2:88:3a:76:
4f:df:d4:9e:22:0d:2b:cc:c9:eb:08:29:f7:7a:79:
5b:99:16:04:de:92:59:80:4a:e1:90:b9:29:9a:e3:
51:cc:bd:06:cb:ff:bc:37:29:49:f4:81:d5:d9:73:
3f:c4:64:e0:46:88:2e:f4:9b:f6:ea:c1:c0:07:12:
54:8e:b5:16:85:2d:a0:70:dd:6d:a2:1a:73:80:4b:
97:e0:88:b3:ce:28:22:b9:4e:2b:7f:2e:76:57:81:
83:7c:9c:9e:76:f7:60:cb:fd:4b:b5:da:1f:66:9c:
3c:58:53:4d:ac:b6:3a:07:ab:0d:4b:d7:d6:7b:df:
00:bd:8f:f5:e4:30:f6:9b:4c:33:59:d1:e4:bd:6a:
7b:59:db:f9:39:7c:af:64:57:35:c0:43:7d:a1:88:
85:47:b3:43:a5:ab:47:9f:b5:d4:a1:43:ab:5f:87:
de:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4B:42:C7:A4:9E:4B:85:CF:D9:6A:74:61:BC:33:65:DE:C2:14:9E
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS32519.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.104.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:80:3e:cc:fb:b7:ce:74:fd:f6:14:b1:14:60:6c:4d:43:f8:
cc:1e:39:d9:99:57:72:26:c0:67:f8:eb:a1:55:74:d1:b4:38:
93:45:21:4c:5d:37:05:e4:64:05:1a:20:75:73:0b:6f:65:95:
34:ce:4f:ad:5a:1d:36:e7:ec:0a:1a:c0:6c:13:d1:71:8f:41:
89:49:43:d4:7b:3e:d1:06:9f:8c:cc:17:4e:9f:b9:c4:df:6d:
ef:9d:c6:a3:83:db:0f:81:72:0e:9f:ed:56:99:8e:df:d5:4d:
10:bb:3a:9b:33:56:68:73:7f:40:8b:b3:ff:42:e3:ce:d4:fd:
c9:0b:07:6b:0d:2e:83:31:2a:2d:19:6b:7f:af:7c:f0:85:5a:
c5:13:87:c2:35:e5:cb:ef:4d:f7:c9:69:f0:26:9e:f0:20:c3:
7b:18:03:56:c5:87:c5:a9:6d:8c:b0:77:dd:12:5a:44:1d:5e:
25:47:34:28:61:7e:30:34:a1:58:20:c7:42:5b:f0:54:81:b0:
ec:70:a0:cc:51:79:96:37:32:e5:38:e7:64:8a:87:17:d4:e9:
7f:58:38:e1:06:29:32:a5:f3:da:94:70:f0:9a:02:09:ae:3c:
a6:c5:d9:0f:1b:9e:09:1c:4a:b2:e9:52:bf:07:bc:35:65:a2:
17:10:e6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:18:23 2026 by rpki-client